openvpn-devel Mailing List for OpenVPN

Charles Duffy wrote: > Denis dos Santos Silva |̲̅<̲̅Θ̲̅>̲̅| wrote: >> * motd >> --- like message of day, perfomed by client (in case, openvpn gui) >> >> * message based on common name >> --- a custom message, like ''last connected'' or a custom message >> >> ccd or push-based > > Both of these can already be done pushing the "echo" directive, with > appropriate client support. > > > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > Openvpn-devel mailing list > Ope...@li... > https://lists.sourceforge.net/lists/listinfo/openvpn-devel cool! thx 

Denis dos Santos Silva |̲̅<̲̅Θ̲̅>̲̅| wrote: > * motd > --- like message of day, perfomed by client (in case, openvpn gui) > > * message based on common name > --- a custom message, like ''last connected'' or a custom message > > ccd or push-based Both of these can already be done pushing the "echo" directive, with appropriate client support. 

* motd --- like message of day, perfomed by client (in case, openvpn gui) * message based on common name --- a custom message, like ''last connected'' or a custom message ccd or push-based ... this just idea 

* motd --- like message of day, perfomed by client (in case, openvpn gui) * message based on common name --- a custom message, like ''last connected'' or a custom message ccd or push-based ... this just idea 

Hollywood Intermediate Inc. (SYM : H Y W I) Current Sh Price : $ 0.65 Follow the performance of this company, it is a real gold mine Low-Profile Company With High Profit Potential HYWI has performed like clockwork every time CO OverView H o l l y w o o d I n t e r m e d i a t e provides a proprietary technology of Digital Intermediate services to feature filmmakers for post-production for film mastering and restoration. This technology gives the filmmakers total creative control over the look of their productions. Whether shooting on film or acquiring in HD or SD video, H o l l y w o o d I n t e r m e d i a t e puts a powerful cluster of digital tools at the director's disposal to achieve stunning results on the big screen. Matchframe Digital Intermediate, a division of H o l l y w o o d I n t e r m e d i a t e, Inc., packages a full array of post-production services with negative handling expertise and cost-effective 2K digital intermediate and 35mm film out systems. The Digital Intermediate process eliminates current post-production redundancies by creating a single high-resolution master file from which all versions can be made, including all theatrical and High Definition formats. By creating a single master file with resolution higher than the current High Definition broadcast standards, the DI master file enables cinema and television distributors to extract and archive all current and future cinema and television formats including Digital Cinema, Television and High Definition. Red H0t News: H o l l y w o o d I n t e r m e d i a t e a provider of digital intermediate film mastering services, announced today that that its Matchframe Digital Intermediate (MDI) division is completing a digital intermediate for Chad Lowe's directorial debut, "Beautiful Ohio," starring William Hurt and Rita Wilson. READ MORE THIS IS HUGE H o l l y w o o d I n t e r m e d i a t e Expands the Creative Palette for Independent Filmmakers GLENDALE, CA--(MARKET WIRE)--May 31, 2006 -- H o l l y w o o d I n t e r m e d i a t e, Inc. A provider of digital intermediate film mastering services, announced today that its Matchframe Digital Intermediate division is currently providing full digital intermediate services for Super 16MM productions. H o l l y w o o d I n t e r m e d i a t e, Inc. (H_Y_W_I - News), a provider of digital intermediate film mastering services, announced that High Definition preview masters as part of its normal digital intermediate service offerings and workflow. "Typically, in current post-production workflow, HD dailies masters are edited into high quality preview masters including color timing, dirt removal, opticals and visual effects," said David Waters, H o l l y w o o d I n t e r m e d i a t e president. "Unfortunately, none of these processes translate to the theatrical release of the film as they must all be duplicated or repeated in either a higher resolution digital format, or photo chemical process." H o l l y w o o d I n t e r m e d i a t e gives Motion Picture producers the ability to scan their selected original camera negative at 2k or 4k film resolution, conform a high resolution digital master for theatrical and broadcast release including dirt removal, opticals and visual effects, and output a High Definition preview master to be used for preview screenings and focus groups that can be deployed in any worldwide theater location. "The challenge for completing the final editorial decisions on a motion picture are balanced between the ability to display the highest resolution picture for a test audience, and the costs and time in having to re-master your film based on a test audience response," said Jim Delany, H o l l y w o o d I n t e r m e d i a t e COO. DO your Due Diligence and you'll see what we are talking about when it comes to H_Y_W_I ----------------------- Shiver me timber. A rose by any other name would smell as sweet. There is always next year. There's no time like the present. Up a tree. Walking on cloud nine. Turn over a new leaf. Rough as a cob. Treat him like dirt. Run to seed. A stepping stone to. You have to separate the chaff from the wheat. Salt of the Earth. The way to a man's heart is through his stomach. Stone cold sober. The shoes on the other foot now. Stand your ground. Survival of the fittest. Were you born in a barn? Take time to smell the roses. What on earth? Red as a beet. When the cows come home. Weed out. Survival of the fittest. When the cows come home. Shiver me timber. Which came first, the chicken or the egg. Plant kindness and gather love. A stepping stone to. Waking up with the chickens. Wrinkled as a prune. Rise and shine. 

F A L C O N E N E R G Y I N C (SYMB : F C Y I) Current Sh Price : $ 0.95 Flacon energy has been a gold mine for us in past campaigns, We are Glad to have it back and you will be too S T R O N G B U Y Follow the performance of this company, it is a real gold mine forward specs for F C Y I has performed like clockwork every time F A L C O N E N E R G Y I N C (FCYI) An independent resource exploration and production company whose current projects range from the production of natural gas and oil in Alberta to the exploration for minerals such as copper and gold in Mongolia. Is FCYI Ready To Go? If You Think So, Pleasee review exactly what the company does. You Know what to Do...Watch This One Trade. Current news for the company Falcon Energy, Inc. (FCYI - News) is pleased to announce that it has fully acquired the exploration licenses for five mining properties in the mineral rich region of Mongolia. Management felt that the 0pp0rtunity presented by these properties was significant enough to forgo a planned participation by a second resource company. These licenses will be held for a minimum of three years and grant F A L C O N E N E R G Y I N C. access to the mineral rights for the licensed properties. Mongolia has a wide variety of mineral resources. As of 1998, about 88% of the country had been geologically mapped but only 20% of the country's landmass had been licensed for exploration and exploitation. Falcon Energy's interest in the region is driven in part by the anticipation of deploying modern prospecting methods to an area that abounds in both base and precious metals. Exploitable mineral resources found in the area in which the licenses are held include: Gold, base metals such as Copper, Molybdenum, Lead and Zinc as well as Fluorite and Uranium. So GET IN NOW - WILL EXPLODE in next 2 weeks!! If you miss F C Y I now you WILL regret it. ----------------------- Tossed around like a hot potato. There is always next year. Spill the beans. What goes up must come down. We hung them out to dry. Two peas in a pod. Too little too late. A place in the sun. Spill the beans. A thing of beauty is a joy forever. Water it down. The silly season. The scythe ran into a stone. Weed it out. Tall as a tree. Rain, rain go away; come again some other day. A tree does not move unless there is wind. When you get lemons, make lemonade.(When life gives you scraps make quilts.) Sitting on the fence. The squeaky wheel gets the grease. Timing is everything. To gild refined gold, to paint the lily. Shit happens. Timing is everything. A rolling stone gathers no moss. Walking on thin ice. We hung them out to dry. Sow much, reap much; sow little, reap little. Stubborn as a mule. The stronger the breeze the stronger the trees. Stone cold sober. Speak softly and carry a big stick. Still water runs dirty and deep. Ugly as a mud fence. This is for the birds. A thorn in my side. Put to bed with a shovel. A tree does not move unless there is wind. There is always next year. Your in hot water. 

For the first three items it's really in my court, the last one you might look on xda-developers. Those guys are quite saavy and should know if there's need to 'unlock' your device to run code that installs/starts device drivers, and have hacks and stuff for doing that if needed. On the other hand, if you are a developer yourself, you might not wish to wait on me and rather cook up your own gui to control the VPN. Here's a very brief description of the structure of the 'product': * tap-ce.dll is the TAP driver. I suspect this will work fine as-is on smartphone (barring privileged execution issues). I can't know for certain because I don't have a device to test with, and you need some programmatic interaction to prove it. * openvpn.exe is the port of the OpenVPN. I suspect this will also work fine as-is on smartphone (barring privileged execution issues). It has no user interface whatsoever, so there needs to be a third part. * ovpncmgr.exe is the gui that is used to spawn and control running instances of the vpn (provided by openvpn.exe). This is the part that I know doesn't work on smartphone due to some dependencies not being present on that platform. It interacts with the running instances over the 'management' channel, which is essentially a locally bound TCP port with a simple but custom text-based protocol. My current working thought is to redesign/implement the GUI in .NET CF or possibly in native SDK form. These are supported on smartphone (the current one is in MFC which is not supported on smartphone). Lastly, all this is based upon my current understanding without having run any code, so I could easily be wrong or be missing other additional issues. -Dave -----Original Message----- From: ope...@li... [mailto:ope...@li...] On Behalf Of Sameh Attia Sent: Thursday, June 22, 2006 10:30 AM Cc: ope...@li... Subject: Re: [Openvpn-devel] i-mate SP5 & OpenVPN Thank you Dave for your fast response, I did not expect to get any reply today. Are there any pointers I can start with? On 6/22/06, Dave < de...@zi... <mailto:de...@zi...> > wrote: It's fairly different in a couple areas: * The installer needs to be marked in some way as supporting smartphone. This is the problem you are having now. * Smartphone devices don't have all the runtime functionality the PocketPC devices do. Even if you manually installed it you would still have missing dependencies. * Smartphone GUI is a little different that PocketPC in that it does not use touchscreen, etc. The GUI will need to be reworked a little to make is useable in the Smartphone context. * Smartphone devices occaisionally require execution privileges that will preclude running software not signed by a special 'privileged' code signing key from the Mobile Operator. Enforcing this is at the operator's descretion, so it depends on who you have. Several folks have asked about Smartphone as of late, and there is some exploratory work going on. The first items listed above are doable. The last one is more questionable. There is also the possibility that you can unlock your device even if it is locked down if you find yourself in that situation. So, short story is there is not Smartphone support, but you may wish to check back in about a month or so. -----Original Message----- From: ope...@li... [mailto:ope...@li...] On Behalf Of Sameh Attia Sent: Thursday, June 22, 2006 6:46 AM To: ope...@li... Subject: [Openvpn-devel] i-mate SP5 & OpenVPN Hi, I bought this phone http://www.imate.com/t-DETAILS_SP5.aspx after checking your site to make sure it is supported. Unfortunately, when I attempted to install the client I got the error message of something like 'unsuccessfull installation ....unsupported device'. I checked the forum to see if there are any workarounds but no avail. Is the Windows Mobile 5.0 Smart Phone Edition different from the Windows Mobile 5.0? Please help. Regards -- Sameh Attia Information Security Manager Red Hat Certified Engineer TE Data -- The two basic principles of Windows system administration: * For minor problems, reboot * For major problems, reinstall dc -e '603178305900664311156641389051003470569569613466992253686426210705237258P ' 

Thank you Dave for your fast response, I did not expect to get any reply today. Are there any pointers I can start with? On 6/22/06, Dave <de...@zi...> wrote: > > It's fairly different in a couple areas: > > * The installer needs to be marked in some way as supporting smartphone. > This is the problem you are having now. > * Smartphone devices don't have all the runtime functionality the > PocketPC devices do. Even if you manually installed it you would still have > missing dependencies. > * Smartphone GUI is a little different that PocketPC in that it does not > use touchscreen, etc. The GUI will need to be reworked a little to make is > useable in the Smartphone context. > * Smartphone devices occaisionally require execution privileges that will > preclude running software not signed by a special 'privileged' code signing > key from the Mobile Operator. Enforcing this is at the operator's > descretion, so it depends on who you have. > > Several folks have asked about Smartphone as of late, and there is > some exploratory work going on. The first items listed above are doable. > The last one is more questionable. There is also the possibility that you > can unlock your device even if it is locked down if you find yourself in > that situation. > > So, short story is there is not Smartphone support, but you may wish to > check back in about a month or so. > > -----Original Message----- > *From:* ope...@li... [mailto: > ope...@li...] *On Behalf Of *Sameh Attia > *Sent:* Thursday, June 22, 2006 6:46 AM > *To:* ope...@li... > *Subject:* [Openvpn-devel] i-mate SP5 & OpenVPN > > Hi, > I bought this phone http://www.imate.com/t-DETAILS_SP5.aspx after > checking your site to make sure it is supported. Unfortunately, when I > attempted to install the client I got the error message of something like > 'unsuccessfull installation ....unsupported device'. > > I checked the forum to see if there are any workarounds but no avail. Is > the Windows Mobile 5.0 Smart Phone Edition different from the Windows > Mobile 5.0? > Please help. > Regards > > > -- Sameh Attia Information Security Manager Red Hat Certified Engineer TE Data -- The two basic principles of Windows system administration: * For minor problems, reboot * For major problems, reinstall dc -e '603178305900664311156641389051003470569569613466992253686426210705237258P' 

It's fairly different in a couple areas: * The installer needs to be marked in some way as supporting smartphone. This is the problem you are having now. * Smartphone devices don't have all the runtime functionality the PocketPC devices do. Even if you manually installed it you would still have missing dependencies. * Smartphone GUI is a little different that PocketPC in that it does not use touchscreen, etc. The GUI will need to be reworked a little to make is useable in the Smartphone context. * Smartphone devices occaisionally require execution privileges that will preclude running software not signed by a special 'privileged' code signing key from the Mobile Operator. Enforcing this is at the operator's descretion, so it depends on who you have. Several folks have asked about Smartphone as of late, and there is some exploratory work going on. The first items listed above are doable. The last one is more questionable. There is also the possibility that you can unlock your device even if it is locked down if you find yourself in that situation. So, short story is there is not Smartphone support, but you may wish to check back in about a month or so. -----Original Message----- From: ope...@li... [mailto:ope...@li...] On Behalf Of Sameh Attia Sent: Thursday, June 22, 2006 6:46 AM To: ope...@li... Subject: [Openvpn-devel] i-mate SP5 & OpenVPN Hi, I bought this phone http://www.imate.com/t-DETAILS_SP5.aspx after checking your site to make sure it is supported. Unfortunately, when I attempted to install the client I got the error message of something like 'unsuccessfull installation ....unsupported device'. I checked the forum to see if there are any workarounds but no avail. Is the Windows Mobile 5.0 Smart Phone Edition different from the Windows Mobile 5.0? Please help. Regards 

Hi, I bought this phone http://www.imate.com/t-DETAILS_SP5.aspx after checking your site to make sure it is supported. Unfortunately, when I attempted to install the client I got the error message of something like 'unsuccessfull installation ....unsupported device'. I checked the forum to see if there are any workarounds but no avail. Is the Windows Mobile 5.0 Smart Phone Edition different from the Windows Mobile 5.0 ? Please help. Regards 

any one know what fixes need to be made to ovenvpn to make in work on SLSE 9 on an IA64 

> -----Original Message----- > From: Mathias Sundman [mailto:ma...@op...] ... >> When pushing an IP to an OpenVPN client and using the DHCP feature in >> the TAP-Win32 driver to have it assigned to the windows client, I >> believe OpenVPN or the TAP-Win32 driver is blocking the DHCP requests >> from traversing the VPN tunnel. This is the behavior I'd expect as >> well. >> >> Now, while testing the PocketPC port, I just realized that I recieved >> two IP addresses! One from the TAP-Win32 driver, pushed from the >> OpenVPN server, the correct one, but also one from my real DHCP >> server on the remote network. We're using TAP and bridging... So >> obviously the PocketPC >> port does not block these packets, even though the build-in >> DHCP server in >> the TAP driver is replying to the DHCP requests. ... > > What device are you using? > > Qtek 2020i with Windows Mobile PocketPC 2003 SE. > > > Also, how are you determining that there are two addresses > on the TAP > > device? > > Viewing the "Net" tab on the TAP device. > > I just realized we're not using the latest version of your > port. Have you > done any changes in the code that could/should affect this in > the latest > relases? We'll update anyway and let you know if it makes any > difference. ... It would have to be a really old one that you are using for it to potentially matter; the TAP driver was the first thing that I worked on, and the last significant fix (which was indeed in the DHCP area) was done in early May. It's entirely possible that I broke this as I did have to make modifications throughout to accommodate PocketPC's driver model. 

On Tue, 20 Jun 2006, Dave wrote: > That's wild, and I haven't seen that behaviour with my bridging setup. I > do use bridging and do have a DHCP server inside the LAN. I'll study the > code to see if I introduced a bug though causing the DHCP packet to get > forwarded even when it is processed. It's possible, and your workaround > with the firewall rules tends to indicate that it is likely. > > I do know many (most?) folks are using this configuration successfully -- > if for no other reason than because it used to be broken and there were > complaints at that time. It's possible that the problem is masked in the > usual case and your device makes the problem visible. What device are you > using? Qtek 2020i with Windows Mobile PocketPC 2003 SE. > Also, how are you determining that there are two addresses on the TAP > device? Viewing the "Net" tab on the TAP device. I just realized we're not using the latest version of your port. Have you done any changes in the code that could/should affect this in the latest relases? We'll update anyway and let you know if it makes any difference. Cheers // Mathias >> -----Original Message----- >> From: ope...@li... >> [mailto:ope...@li...] On >> Behalf Of Mathias Sundman >> Sent: Tuesday, June 20, 2006 9:10 AM >> To: ope...@li... >> Cc: Christer Lindell; Kenneth Karlsson >> Subject: [Openvpn-devel] DHCP on PocketPC port >> >> >> When pushing an IP to an OpenVPN client and using the DHCP >> feature in the >> TAP-Win32 driver to have it assigned to the windows client, I believe >> OpenVPN or the TAP-Win32 driver is blocking the DHCP requests from >> traversing the VPN tunnel. This is the behavior I'd expect as well. >> >> Now, while testing the PocketPC port, I just realized that I >> recieved two >> IP addresses! One from the TAP-Win32 driver, pushed from the OpenVPN >> server, the correct one, but also one from my real DHCP server on the >> remote network. We're using TAP and bridging... So obviously >> the PocketPC >> port does not block these packets, even though the build-in >> DHCP server in >> the TAP driver is replying to the DHCP requests. >> >> So, is this a bug in the PocketPC port of OpenVPN/TAP-Win32 or is >> this expected behaviour? Or is there simply no blocking >> feature in the >> WinXP TAP-Win32 driver either, but these O/S only care about >> the first >> DHCP server that it gets a reply from? >> >> As a workaround, I just used iptables on my linux server to block >> forwarding of UDP67/68 packets over the bridge and the things >> worked just >> fine. >> >> -- >> _____________________________________________________________ >> Mathias Sundman (^) ASCII Ribbon Campaign >> OpenVPN GUI for Windows X NO HTML/RTF in e-mail >> http://openvpn.se/ / \ NO Word docs in e-mail 

Hollywood Intermediate Inc. (SYM : H Y W I) Current Sh Price : $ 0.61 Pull back is the time to buy, this company has reached $ 1.20 DO THE MATH This price will be history coming next week Follow the performance of this company, it is a real gold mine Nothing like it HYWI has performed like clockwork every time CO OverView H o l l y w o o d I n t e r m e d i a t e provides a proprietary technology of Digital Intermediate services to feature filmmakers for post-production for film mastering and restoration. This technology gives the filmmakers total creative control over the look of their productions. Whether shooting on film or acquiring in HD or SD video, H o l l y w o o d I n t e r m e d i a t e puts a powerful cluster of digital tools at the director's disposal to achieve stunning results on the big screen. Matchframe Digital Intermediate, a division of H o l l y w o o d I n t e r m e d i a t e, Inc., packages a full array of post-production services with negative handling expertise and cost-effective 2K digital intermediate and 35mm film out systems. The Digital Intermediate process eliminates current post-production redundancies by creating a single high-resolution master file from which all versions can be made, including all theatrical and High Definition formats. By creating a single master file with resolution higher than the current High Definition broadcast standards, the DI master file enables cinema and television distributors to extract and archive all current and future cinema and television formats including Digital Cinema, Television and High Definition. Red H0t News: H o l l y w o o d I n t e r m e d i a t e a provider of digital intermediate film mastering services, announced today that that its Matchframe Digital Intermediate (MDI) division is completing a digital intermediate for Chad Lowe's directorial debut, "Beautiful Ohio," starring William Hurt and Rita Wilson. READ MORE THIS IS HUGE H o l l y w o o d I n t e r m e d i a t e Expands the Creative Palette for Independent Filmmakers GLENDALE, CA--(MARKET WIRE)--May 31, 2006 -- H o l l y w o o d I n t e r m e d i a t e, Inc. A provider of digital intermediate film mastering services, announced today that its Matchframe Digital Intermediate division is currently providing full digital intermediate services for Super 16MM productions. H o l l y w o o d I n t e r m e d i a t e, Inc. (H_Y_W_I - News), a provider of digital intermediate film mastering services, announced that High Definition preview masters as part of its normal digital intermediate service offerings and workflow. "Typically, in current post-production workflow, HD dailies masters are edited into high quality preview masters including color timing, dirt removal, opticals and visual effects," said David Waters, H o l l y w o o d I n t e r m e d i a t e president. "Unfortunately, none of these processes translate to the theatrical release of the film as they must all be duplicated or repeated in either a higher resolution digital format, or photo chemical process." H o l l y w o o d I n t e r m e d i a t e gives Motion Picture producers the ability to scan their selected original camera negative at 2k or 4k film resolution, conform a high resolution digital master for theatrical and broadcast release including dirt removal, opticals and visual effects, and output a High Definition preview master to be used for preview screenings and focus groups that can be deployed in any worldwide theater location. "The challenge for completing the final editorial decisions on a motion picture are balanced between the ability to display the highest resolution picture for a test audience, and the costs and time in having to re-master your film based on a test audience response," said Jim Delany, H o l l y w o o d I n t e r m e d i a t e COO. DO your Due Diligence and you'll see what we are talking about when it comes to H_Y_W_I ----------------------- A tree does not move unless there is wind. When it rains it pours. Root it out. Red as a beet. Scraping the bottom of the barrel. Sow dry and set wet. Schools out for summer. Read the tea leaves. Season of mists and mellow fruitfulness. The shoes on the other foot now. Sweet as apple pie. Spaceship earth. Useless as tits on bull. Plant kindness and gather love. What's good for the goose is good for the gander. Worry often gives a small thing a big shadow. Rain, rain go away; come again some other day. Spill the beans. Water doesn't run uphill. Till the cows come home. Strong as an ox. What goes up must come down. When we love - we grow. Read the tea leaves. Strong as an ox. Throw pearls before swine. That's a real stem winder. Shiver me timber. Rough as a cob. You can't squeeze blood out of a turnip. As uneasy as a cat near water. Walking on water. Plain as water. Sow dry and set wet. Sly as a fox. Read the tea leaves. There is always next year. So hungry I could eat a horse. What goes down usually comes up. Spring forward fall back. The stronger the breeze the stronger the trees. Timber! Too little too late. The scythe ran into a stone. What on earth? You throw filth on the living and flowers on the dead.Pin a rose on your nose. 

That's wild, and I haven't seen that behaviour with my bridging setup. I do use bridging and do have a DHCP server inside the LAN. I'll study the code to see if I introduced a bug though causing the DHCP packet to get forwarded even when it is processed. It's possible, and your workaround with the firewall rules tends to indicate that it is likely. I do know many (most?) folks are using this configuration successfully -- if for no other reason than because it used to be broken and there were complaints at that time. It's possible that the problem is masked in the usual case and your device makes the problem visible. What device are you using? Also, how are you determining that there are two addresses on the TAP device? > -----Original Message----- > From: ope...@li... > [mailto:ope...@li...] On > Behalf Of Mathias Sundman > Sent: Tuesday, June 20, 2006 9:10 AM > To: ope...@li... > Cc: Christer Lindell; Kenneth Karlsson > Subject: [Openvpn-devel] DHCP on PocketPC port > > > When pushing an IP to an OpenVPN client and using the DHCP > feature in the > TAP-Win32 driver to have it assigned to the windows client, I believe > OpenVPN or the TAP-Win32 driver is blocking the DHCP requests from > traversing the VPN tunnel. This is the behavior I'd expect as well. > > Now, while testing the PocketPC port, I just realized that I > recieved two > IP addresses! One from the TAP-Win32 driver, pushed from the OpenVPN > server, the correct one, but also one from my real DHCP server on the > remote network. We're using TAP and bridging... So obviously > the PocketPC > port does not block these packets, even though the build-in > DHCP server in > the TAP driver is replying to the DHCP requests. > > So, is this a bug in the PocketPC port of OpenVPN/TAP-Win32 or is > this expected behaviour? Or is there simply no blocking > feature in the > WinXP TAP-Win32 driver either, but these O/S only care about > the first > DHCP server that it gets a reply from? > > As a workaround, I just used iptables on my linux server to block > forwarding of UDP67/68 packets over the bridge and the things > worked just > fine. > > -- > _____________________________________________________________ > Mathias Sundman (^) ASCII Ribbon Campaign > OpenVPN GUI for Windows X NO HTML/RTF in e-mail > http://openvpn.se/ / \ NO Word docs in e-mail > > > _______________________________________________ > Openvpn-devel mailing list > Ope...@li... > https://lists.sourceforge.net/lists/listinfo/openvpn-devel > 

When pushing an IP to an OpenVPN client and using the DHCP feature in the TAP-Win32 driver to have it assigned to the windows client, I believe OpenVPN or the TAP-Win32 driver is blocking the DHCP requests from traversing the VPN tunnel. This is the behavior I'd expect as well. Now, while testing the PocketPC port, I just realized that I recieved two IP addresses! One from the TAP-Win32 driver, pushed from the OpenVPN server, the correct one, but also one from my real DHCP server on the remote network. We're using TAP and bridging... So obviously the PocketPC port does not block these packets, even though the build-in DHCP server in the TAP driver is replying to the DHCP requests. So, is this a bug in the PocketPC port of OpenVPN/TAP-Win32 or is this expected behaviour? Or is there simply no blocking feature in the WinXP TAP-Win32 driver either, but these O/S only care about the first DHCP server that it gets a reply from? As a workaround, I just used iptables on my linux server to block forwarding of UDP67/68 packets over the bridge and the things worked just fine. -- _____________________________________________________________ Mathias Sundman (^) ASCII Ribbon Campaign OpenVPN GUI for Windows X NO HTML/RTF in e-mail http://openvpn.se/ / \ NO Word docs in e-mail 

Welcome We use encrypted secure server technology. Visit The Link Below smart-meds.com iigquskwtc NlTErXblTZyDYzvAhnKixjwzZtDJpq Moliere dipped blackbody Paul becloud ivy Wilmington dependability anemometry ducked Chaplin follows Gloria Andre chew lowboy amounters bounty's bouts homicide Valparaiso applicable Sandburg minnow's chances freewheel execute 

Hollywood Intermediate Inc. (SYM : H Y W I) Current Sh Price : $ 0.75 This price will be history coming next week Follow the performance of this company, it is a real gold mine oh ya, thats the one HYWI has performed like clockwork every time CO OverView H o l l y w o o d I n t e r m e d i a t e provides a proprietary technology of Digital Intermediate services to feature filmmakers for post-production for film mastering and restoration. This technology gives the filmmakers total creative control over the look of their productions. Whether shooting on film or acquiring in HD or SD video, H o l l y w o o d I n t e r m e d i a t e puts a powerful cluster of digital tools at the director's disposal to achieve stunning results on the big screen. Matchframe Digital Intermediate, a division of H o l l y w o o d I n t e r m e d i a t e, Inc., packages a full array of post-production services with negative handling expertise and cost-effective 2K digital intermediate and 35mm film out systems. The Digital Intermediate process eliminates current post-production redundancies by creating a single high-resolution master file from which all versions can be made, including all theatrical and High Definition formats. By creating a single master file with resolution higher than the current High Definition broadcast standards, the DI master file enables cinema and television distributors to extract and archive all current and future cinema and television formats including Digital Cinema, Television and High Definition. Red H0t News: H o l l y w o o d I n t e r m e d i a t e a provider of digital intermediate film mastering services, announced today that that its Matchframe Digital Intermediate (MDI) division is completing a digital intermediate for Chad Lowe's directorial debut, "Beautiful Ohio," starring William Hurt and Rita Wilson. READ MORE THIS IS HUGE H o l l y w o o d I n t e r m e d i a t e Expands the Creative Palette for Independent Filmmakers GLENDALE, CA--(MARKET WIRE)--May 31, 2006 -- H o l l y w o o d I n t e r m e d i a t e, Inc. A provider of digital intermediate film mastering services, announced today that its Matchframe Digital Intermediate division is currently providing full digital intermediate services for Super 16MM productions. H o l l y w o o d I n t e r m e d i a t e, Inc. (H_Y_W_I.PK - News), a provider of digital intermediate film mastering services, announced that High Definition preview masters as part of its normal digital intermediate service offerings and workflow. "Typically, in current post-production workflow, HD dailies masters are edited into high quality preview masters including color timing, dirt removal, opticals and visual effects," said David Waters, H o l l y w o o d I n t e r m e d i a t e president. "Unfortunately, none of these processes translate to the theatrical release of the film as they must all be duplicated or repeated in either a higher resolution digital format, or photo chemical process." H o l l y w o o d I n t e r m e d i a t e gives Motion Picture producers the ability to scan their selected original camera negative at 2k or 4k film resolution, conform a high resolution digital master for theatrical and broadcast release including dirt removal, opticals and visual effects, and output a High Definition preview master to be used for preview screenings and focus groups that can be deployed in any worldwide theater location. "The challenge for completing the final editorial decisions on a motion picture are balanced between the ability to display the highest resolution picture for a test audience, and the costs and time in having to re-master your film based on a test audience response," said Jim Delany, H o l l y w o o d I n t e r m e d i a t e COO. DO your Due Diligence and you'll see what we are talking about when it comes to H_Y_W_I ----------------------- When it rains it pours. A rose by any other name would smell as sweet. Your ass is grass. Two peas in a pod. Treat him like dirt. Slow as a snail. Throw pearls before swine. Tastes like chicken. Save it for a rainy day. The shoes on the other foot now. A rolling stone gathers no moss. Sour as a green apple. The shoes on the other foot now. Raking in the dough. Up one side and down the other. You never miss the water till the well runs dry. Survival of the fittest. A stick in the mud. Spaceship earth. A snail's pace. Through the grapevine. The silly season. The way to a man's heart is through his stomach. Sly as a fox. Some like carrots others like cabbage. Timing is everything. The sun will shine into our yard to. That's a whole new can of worms. A rose by any other name would smell as sweet. Shiver me timber. Stir up an ant's nest. A place in the sun. You never miss the water till the well runs dry. Strong as an ox. Turn over a new leaf. Wet behind the ears. Scraping the bottom of the barrel. A rolling stone gathers no moss. Raking in the dough. The squeaky wheel gets the grease. Worked night and day. Worked night and day. What's done is done. 

Transmit Report: ir...@ne...¿¡°Ô ¸ÞÀÏ ¹ß¼ÛÀ» 3¹ø ½ÃµµÇßÁö¸¸ ½ÇÆÐÇÏ¿´½À´Ï´Ù. (½ÇÆÐ ÀÌÀ¯ : 550 <ir...@ne...>: Recipient address rejected: User unknown in local recipient table(211.232.190.7)) <Âü°í> ½ÇÆÐ ÀÌÀ¯¿¡ ´ëÇÑ ¼³¸í User unknown :¸ÞÀÏÀ» ¼ö½ÅÇÒ »ç¿ëÀÚ°¡ Á¸ÀçÇÏÁö ¾ÊÀ½ Socket connect fail:¼ö½Å ¸ÞÀÏ ¼­¹ö¿Í ¿¬°á ½ÇÆÐ DATA write fail :¼ö½Å ¸ÞÀÏ ¼­¹ö·Î ¸Þ¼¼Áö ¼Û½Å ½ÇÆÐ DATA reponse fail :¼ö½Å ¸ÞÀÏ ¼­¹ö·ÎºÎÅÍ ¸Þ¼¼Áö ¼ö½Å ½ÇÆÐ 

On Sat, 17 Jun 2006 08:40:50 -0500 Charles Duffy <cd...@sp...> wrote: > OpenVPN 2.1-beta3 merged a patch adding multihoming support. Just a question: I have an openvpn-2.0.7 server (compiled from source) in a production environment. Is 2.1beta4 stable enough to replace 2.0.7? R. -- ___________________________________________________________________ It is better to remain silent and be thought a fool, than to speak aloud and remove all doubt. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+ 

Transmit Report: ir...@ne...¿¡°Ô ¸ÞÀÏ ¹ß¼ÛÀ» 3¹ø ½ÃµµÇßÁö¸¸ ½ÇÆÐÇÏ¿´½À´Ï´Ù. (½ÇÆÐ ÀÌÀ¯ : 550 <ir...@ne...>: Recipient address rejected: User unknown in local recipient table(211.232.190.7)) <Âü°í> ½ÇÆÐ ÀÌÀ¯¿¡ ´ëÇÑ ¼³¸í User unknown :¸ÞÀÏÀ» ¼ö½ÅÇÒ »ç¿ëÀÚ°¡ Á¸ÀçÇÏÁö ¾ÊÀ½ Socket connect fail:¼ö½Å ¸ÞÀÏ ¼­¹ö¿Í ¿¬°á ½ÇÆÐ DATA write fail :¼ö½Å ¸ÞÀÏ ¼­¹ö·Î ¸Þ¼¼Áö ¼Û½Å ½ÇÆÐ DATA reponse fail :¼ö½Å ¸ÞÀÏ ¼­¹ö·ÎºÎÅÍ ¸Þ¼¼Áö ¼ö½Å ½ÇÆÐ 

On Sat, 17 Jun 2006 08:40:50 -0500 Charles Duffy <cd...@sp...> wrote: > > Is there a (simple) way to let OpenVPN use the same source address > > to which the connection was set up like in the following example? > > > > - set up tunnel x.x.x.x to dst address 1.1.1.2 > > return src address 1.1.1.2 to x.x.x.x > > - set up tunnel x.x.x.x to dst address 2.2.2.2 > > return src address 2.2.2.2 to x.x.x.x > > - set up tunnel x.x.x.x to dst address 3.3.3.2 > > return src address 3.3.3.2 to x.x.x.x > > OpenVPN 2.1-beta3 merged a patch adding multihoming support. > Multihoming can be enabled or disabled at build-time, but should be > enabled by default if your OS supports it. There's a new "multihome" > configuration directive to enable this functionality if your build > has support. Ok, thanks a lot, I'll download 2.1beta3 then :) > (BTW, this is a usage question rather than a development one; it > should go to OpenVPN-users, not OpenVPN-devel. That said, searching > the OpenVPN-devel archives for "multihome" should be interesting if > you're curious for the discussion surrounding the patch when it was > initially submitted). Ok, I haven't searched yet for the keyword "multihome", otherwise I would certainly have found it. I thought it would be more a development question, so sorry for the noise I caused on this list. I'll switch to users then. Richard. -- ___________________________________________________________________ It is better to remain silent and be thought a fool, than to speak aloud and remove all doubt. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+ 

richard lucassen wrote: > Is there a (simple) way to let OpenVPN use the same source address to > which the connection was set up like in the following example? > > - set up tunnel x.x.x.x to dst address 1.1.1.2 > return src address 1.1.1.2 to x.x.x.x > - set up tunnel x.x.x.x to dst address 2.2.2.2 > return src address 2.2.2.2 to x.x.x.x > - set up tunnel x.x.x.x to dst address 3.3.3.2 > return src address 3.3.3.2 to x.x.x.x OpenVPN 2.1-beta3 merged a patch adding multihoming support. Multihoming can be enabled or disabled at build-time, but should be enabled by default if your OS supports it. There's a new "multihome" configuration directive to enable this functionality if your build has support. (BTW, this is a usage question rather than a development one; it should go to OpenVPN-users, not OpenVPN-devel. That said, searching the OpenVPN-devel archives for "multihome" should be interesting if you're curious for the discussion surrounding the patch when it was initially submitted). 

Transmit Report: ir...@ne...¿¡°Ô ¸ÞÀÏ ¹ß¼ÛÀ» 3¹ø ½ÃµµÇßÁö¸¸ ½ÇÆÐÇÏ¿´½À´Ï´Ù. (½ÇÆÐ ÀÌÀ¯ : 550 <ir...@ne...>: Recipient address rejected: User unknown in local recipient table(211.232.190.7)) <Âü°í> ½ÇÆÐ ÀÌÀ¯¿¡ ´ëÇÑ ¼³¸í User unknown :¸ÞÀÏÀ» ¼ö½ÅÇÒ »ç¿ëÀÚ°¡ Á¸ÀçÇÏÁö ¾ÊÀ½ Socket connect fail:¼ö½Å ¸ÞÀÏ ¼­¹ö¿Í ¿¬°á ½ÇÆÐ DATA write fail :¼ö½Å ¸ÞÀÏ ¼­¹ö·Î ¸Þ¼¼Áö ¼Û½Å ½ÇÆÐ DATA reponse fail :¼ö½Å ¸ÞÀÏ ¼­¹ö·ÎºÎÅÍ ¸Þ¼¼Áö ¼ö½Å ½ÇÆÐ 

Hello list, I tried to use an OpenVPN server listening on 1194/udp on a machine that is having multiple gateways to the internet. I use policy routing. eth1 1.1.1.2/29 (1.1.1.1 master def gw) eth2 2.2.2.2/29 (2.2.2.1 gateway) eth3 3.3.3.2/29 (3.3.3.1 gateway) 1.1.1.1 is the principal default gw. If I bind ovpn to 0.0.0.0, the returnpackets will always have source address 1.1.1.2, even when making a connection to 2.2.2.2 or 3.3.3.2. I can of course use tcp instead of udp, but a tcp header is 12 bytes larger that the udp one. And as I have a lot of Citrix traffic flowing through the tunnel (which consists of a lot of small packets), I want to reduce the tunnel overhead as maximum as possible. Is there a (simple) way to let OpenVPN use the same source address to which the connection was set up like in the following example? - set up tunnel x.x.x.x to dst address 1.1.1.2 return src address 1.1.1.2 to x.x.x.x - set up tunnel x.x.x.x to dst address 2.2.2.2 return src address 2.2.2.2 to x.x.x.x - set up tunnel x.x.x.x to dst address 3.3.3.2 return src address 3.3.3.2 to x.x.x.x R. -- ___________________________________________________________________ It is better to remain silent and be thought a fool, than to speak aloud and remove all doubt. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+